CVE-2011-3366

CVE-2011-3366 affects Rekonq 0.7.0 and earlier. The root cause is that Rekonq does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the certificate’s common name (CN) through rich text. Connected sources reiterate the same descr...

CVE-2010-2536

CVE-2010-2536 affects rekonq 0.5 and earlier with multiple XSS vectors (universal XSS via a nonexistent-domain URL and other vectors involving the webview and about: views for favorites, bookmarks, closed tabs, and history). Connected sources show vendor updates acknowledging the issue and releas...